MSIL/LockScreen.C [Threat Variant Name]

Short description

MSIL/LockScreen.C
is a
trojan
that blocks access to the Windows operating system.
To regain access to the operating system the user is asked to send an SMS message to a specified telephone number in exchange for a password.
When the correct password is entered the
trojan
is deactivated.

Installation

The
trojan
is often included in the installation packages of games downloaded from untrustworthy sources.

The
trojan
does not create any copies of itself.

The
trojan
creates the following files:

%startup%\­system32.lnk

This causes the
trojan
to be executed on every system start.

Other information

The
trojan
displays the following dialog box:

When the correct password is entered the
trojan
is deactivated.

The password to regain access to the operating system is one of the following:

1992 - 2017 ESET, spol. s r.o. - All rights reserved. Trademarks used therein are trademarks or registered trademarks of ESET, spol. s r.o. or ESET North America. All other names and brands are registered trademarks of their respective companies.